Cannot get through authentication on workstation that is not domain-joined

Hi,

I have problems with MWG to work with workstation that are not domain-joined. When I went on internet, the authentication box came up as expected. However, after I had entered valid user credentials, the browser prompted right away asking for credential again. I just cannot get through authentication. I even tested with all the rules deleted but the authencation ruleset. Same issue on IE, Chrome and Firefox.

If the workstation is domain-joined, it can do integrated authentication without prompting. Authentication.Authencate<NTLM> returns true. Same on IE, Chrome and Firefox.

The MWG devices have joined domain and the user credentials are authenticated OK. I am using the authentication rule from the library with the original user database swapped to NTLM.

Engine setting as below:

I tried both with and without 'Send domain and machine ..' but it is the same.